This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json) Hash identifier: S7tnvKuG2YOZrqwHgHFI9ocoYV/blEo5avPDW1IuNwU= Subject key identifier: B0:D2:C4:4A:81:99:C3:CB:CF:25:4F:E6:1F:EF:6D:1B:7F:5B:60:3F Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8 Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8 Certificate serial: 019B808373B22BAFD1E6855E1C3CF491621D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft Manifest number: 17AE Signing time: Fri 02 Jan 2026 21:00:57 +0000 Manifest this update: Fri 02 Jan 2026 21:00:57 +0000 Manifest next update: Sat 03 Jan 2026 21:00:57 +0000 Files and hashes: 1: 6H1pHroW_WpI3RuJ_XZZvGns_sM.roa (hash: NhpuQWl3vvTwNJCxL4zGLvg+GHPtSA273p3r0OlIk9U=) 2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: zObpk9LE1pqNHDe/53UIoG6l0frfvBSbHVud0YmtMkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:83:73:b2:2b:af:d1:e6:85:5e:1c:3c:f4:91:62:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8 Validity Not Before: Jan 2 21:00:57 2026 GMT Not After : Jan 3 21:00:57 2026 GMT Subject: CN=b0d2c44a8199c3cbcf254fe61fef6d1b7f5b603f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f4:fc:a4:ac:f8:30:64:ca:8c:f1:cc:5e:c4: b8:42:9f:66:49:af:8d:44:29:86:1d:23:ad:ea:b5: 14:f7:77:57:54:bd:e3:b7:8f:4a:84:f3:98:06:20: 5b:57:0b:3e:88:2b:2a:cd:25:65:fb:d3:35:8c:21: dd:8b:8a:62:45:e8:bb:a8:a9:4f:dc:91:95:bd:67: a6:3c:d8:43:35:76:08:82:90:44:fd:96:ee:00:85: 05:95:9b:b3:1c:5f:62:a0:4e:ab:d5:f4:39:d7:86: c3:a2:1a:7a:2a:a9:ea:95:00:be:70:a7:85:46:bf: cf:73:5d:7e:7c:70:95:c6:33:44:5e:1d:1b:e1:46: 2f:e5:9b:b8:96:e5:2c:dd:3c:2b:a8:38:8e:e9:64: 42:9c:25:64:12:28:4a:3c:7f:91:ba:4c:cd:de:7c: 8e:70:e5:4b:58:5c:80:73:f2:37:d9:6a:29:5a:1d: 3b:6c:81:a4:69:36:14:10:16:6a:a3:94:ec:57:3e: fc:84:16:d8:18:5b:cc:8a:1d:bc:45:97:e1:8c:25: 1a:f3:ff:1a:49:8c:fe:58:e5:63:da:96:32:36:09: 2c:b7:ee:7f:04:6d:e1:d2:ce:95:b2:5b:fa:13:62: 65:30:d9:48:cc:97:62:31:55:c7:d8:3f:18:2d:8d: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D2:C4:4A:81:99:C3:CB:CF:25:4F:E6:1F:EF:6D:1B:7F:5B:60:3F X509v3 Authority Key Identifier: keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a3:de:69:9c:fc:18:35:cc:b5:94:df:a9:4f:59:a6:5e:6e: 16:b3:65:c9:2b:ac:25:89:dd:12:b3:3f:67:43:a2:8b:68:26: 01:c7:99:cf:14:bb:a2:a9:a9:70:57:ef:9d:13:7d:a4:ac:16: 8a:a6:be:74:96:d9:5a:ab:a3:30:0f:89:7d:6f:32:05:52:54: 3b:50:79:71:55:9d:f7:cf:17:a8:67:99:42:5a:d0:f4:89:16: 94:9d:51:2e:5e:0c:74:e7:22:cc:f9:86:6f:73:35:5d:09:6d: 29:92:c5:90:81:5a:25:d3:82:58:67:49:87:68:8b:4c:9b:0c: 51:75:0e:b6:d9:3a:5e:1f:12:44:d8:70:8b:08:45:e0:40:61: 32:0a:18:c9:54:b2:44:ae:44:a6:48:5c:df:be:99:2e:a2:1f: 51:3a:1c:57:7a:84:4e:f5:9e:2e:09:ea:96:31:e9:21:6f:63: 13:17:6e:37:09:b1:06:eb:15:b9:f3:db:87:7a:93:e1:56:31: 51:78:ca:07:ec:77:79:67:be:73:dc:9b:07:a2:6c:2f:e4:6c: 69:dc:50:32:83:1f:0e:9d:29:b3:45:b9:fa:62:5a:7f:70:70: 1b:fd:d2:67:a0:b7:88:9e:5a:6c:5b:b2:71:b9:50:ad:89:fc: d5:af:52:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAg3OyK6/R5oVeHDz0kWIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNTNlYzBlOWEwNTNjYmJlMGU5YTA3MWJjYWQ5ZTY4YTk5 Y2NmYTgwHhcNMjYwMTAyMjEwMDU3WhcNMjYwMTAzMjEwMDU3WjAzMTEwLwYDVQQD EyhiMGQyYzQ0YTgxOTljM2NiY2YyNTRmZTYxZmVmNmQxYjdmNWI2MDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfT8pKz4MGTKjPHMXsS4Qp9mSa+N RCmGHSOt6rUU93dXVL3jt49KhPOYBiBbVws+iCsqzSVl+9M1jCHdi4piRei7qKlP 3JGVvWemPNhDNXYIgpBE/ZbuAIUFlZuzHF9ioE6r1fQ514bDohp6KqnqlQC+cKeF Rr/Pc11+fHCVxjNEXh0b4UYv5Zu4luUs3TwrqDiO6WRCnCVkEihKPH+RukzN3nyO cOVLWFyAc/I32WopWh07bIGkaTYUEBZqo5TsVz78hBbYGFvMih28RZfhjCUa8/8a SYz+WOVj2pYyNgkst+5/BG3h0s6Vslv6E2JlMNlIzJdiMVXH2D8YLY0hcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDSxEqBmcPLzyVP5h/vbRt/W2A/MB8GA1UdIwQY MBaAFKtT7A6aBTy74OmgcbytnmipnM+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMt NjNmY2FhYzMxY2EzLzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMtNjNmY2FhYzMxY2Ez LzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqPeaZz8 GDXMtZTfqU9Zpl5uFrNlySusJYndErM/Z0Oii2gmAceZzxS7oqmpcFfvnRN9pKwW iqa+dJbZWqujMA+JfW8yBVJUO1B5cVWd988XqGeZQlrQ9IkWlJ1RLl4MdOcizPmG b3M1XQltKZLFkIFaJdOCWGdJh2iLTJsMUXUOttk6Xh8SRNhwiwhF4EBhMgoYyVSy RK5Epkhc376ZLqIfUTocV3qETvWeLgnqljHpIW9jExduNwmxBusVufPbh3qT4VYx UXjKB+x3eWe+c9ybB6JsL+RsadxQMoMfDp0ps0W5+mJaf3BwG/3SZ6C3iJ5abFuy cblQrYn81a9SGw== -----END CERTIFICATE-----Generated at Sat Jan 3 04:19:58 2026 by rpki-client